RANSOMWARE DEADLOCK HIDES VIA POLYGON SMART CONTRACTS

According to Cointelegraph, cybersecurity firm Group-IB has identified a ransomware strain called “DeadLock” that leverages Polygon smart contracts to conceal its activity and rotate proxy addresses.

The malware dynamically updates its command-and-control communication addresses by interacting with specific smart contracts. Once a victim is infected and data is encrypted, DeadLock issues ransom demands and threatens to sell stolen data if demands are not met.

While the number of known victims remains limited, this novel attack method poses a potential risk to organizations with insufficient security measures.